Risk management framework with COBIT 5 and risk management framework for cloud computing integration

Abstract

Cloud computing is one of the growing inclination in the field of information technology which brings many advantages. There have been many companies or organizations that are increasingly using cloud computing to improve their business process performance. However, cloud computing also carries a number of risks that could adversely affect a company or organization, therefore an effective risk management is needed. This research will integrate COBIT 5 and Risk Management Framework for Cloud Computing by considering the completeness and shortage of each framework to generate a complete framework and can help organization or company to create optimal values from the usage of cloud computing. The results of the integration consist of two phases, namely risk governance and risk management where each phase has primary processes and supporting processes. The result of the integration will be further evaluated through a case study on a company that already uses cloud computing.